Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EcWJ6oBd-3LQrj561CYjnsazTzI.roa
File: EcWJ6oBd-3LQrj561CYjnsazTzI.roa (raw, json)
Hash identifier: i5G+zyWCVqm42fFpXvTYX4XFapYwHgZP3wfWYKzR+ms=
Subject key identifier: 11:C5:89:EA:80:5D:FB:72:D0:AE:3E:7A:D4:26:23:9E:C6:B3:4F:32
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019262C23A9137CEB4FEBDCC90C83C8BC425
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EcWJ6oBd-3LQrj561CYjnsazTzI.roa
Signing time: Sun 06 Oct 2024 16:55:48 +0000
ROA not before: Sun 06 Oct 2024 16:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 45.11.185.0/24 maxlen: 24
45.11.187.0/24 maxlen: 24
2a05:9080:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Oct 2024 09:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:c2:3a:91:37:ce:b4:fe:bd:cc:90:c8:3c:8b:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Oct 6 16:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11c589ea805dfb72d0ae3e7ad426239ec6b34f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:38:54:8f:20:d6:b4:14:fb:2f:77:82:f8:
90:1c:fe:04:d8:d7:54:e6:72:09:14:c2:f3:f4:84:
d4:2b:df:47:67:2e:b5:f4:cb:32:ed:c3:79:3e:a9:
7b:36:57:f9:29:f6:bf:70:8f:71:f0:b1:d4:d3:2c:
72:d7:82:ca:d0:7b:cb:09:c8:5e:c2:5e:c7:95:8a:
c6:11:d5:52:ed:05:85:32:44:b8:40:98:ba:9c:68:
71:4d:6b:9d:88:8c:5a:94:27:20:2c:74:5b:b7:eb:
48:1a:e7:12:d6:a2:a5:33:ef:a6:a1:9a:65:c1:39:
59:65:17:6c:18:9e:d9:85:ee:39:7d:54:48:65:33:
5d:53:f0:d1:bd:8c:c8:e3:26:8b:60:a4:a1:fc:74:
1c:84:2f:30:f5:72:d1:81:df:17:d1:fe:35:b1:98:
b2:e9:d3:0b:b9:6c:a2:e1:7e:31:1c:30:5a:08:08:
07:83:67:ec:bb:f5:d8:b6:7d:3c:0f:7b:26:b6:25:
e9:ae:ee:35:df:4f:3d:66:95:ad:5c:66:35:60:51:
16:13:26:95:b3:38:ce:65:88:e1:19:c7:24:ab:dc:
78:88:d7:4f:ed:82:ac:bc:de:08:5e:b8:8d:30:eb:
eb:3c:84:77:27:59:59:92:80:7b:ee:9c:11:26:1b:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:89:EA:80:5D:FB:72:D0:AE:3E:7A:D4:26:23:9E:C6:B3:4F:32
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EcWJ6oBd-3LQrj561CYjnsazTzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
45.11.187.0/24
IPv6:
2a05:9080:7::/48
Signature Algorithm: sha256WithRSAEncryption
11:46:54:2b:b9:e9:8b:4f:20:9b:36:ed:8d:56:ce:18:98:dd:
81:d6:df:7a:3a:a1:49:9c:00:1b:34:3c:02:72:af:ad:f4:71:
8c:2d:58:a1:c9:9a:91:4e:bf:98:e0:d8:5a:b5:37:ef:e0:2b:
f7:3a:62:4d:87:5e:0f:a0:b3:50:16:f4:5d:6c:4b:cb:db:cb:
b4:f7:9d:05:97:72:7e:4a:67:7e:48:37:41:fe:70:f5:a2:84:
54:66:34:7e:8a:3a:73:87:49:37:ba:2d:36:10:cc:cb:22:95:
c4:74:89:15:52:2d:b2:5e:a3:fe:ba:99:f0:77:09:4a:5d:b2:
42:b9:e4:4f:19:07:66:b7:29:a8:22:6f:63:db:32:4f:08:fe:
d6:a4:51:db:42:b6:a6:d2:de:b1:c0:57:b2:04:a9:5f:5b:a4:
33:af:aa:e3:f9:d2:bf:a7:2d:87:06:ac:c4:d2:3d:dd:72:15:
96:10:90:18:db:3d:5c:1d:eb:bf:9c:f8:b8:cf:7d:94:74:67:
2f:5b:59:a9:ed:83:0c:24:c3:9b:70:6c:61:6a:63:43:fe:ba:
8e:77:dd:6f:41:6e:c4:4e:f4:41:16:40:88:64:6c:83:d7:55:
d9:14:9f:98:cb:3a:7d:31:f6:26:0a:2e:f4:69:01:f3:cf:d4:
47:8a:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 12:02:05 2024 by rpki-client on console-fra.rpki-client.org